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REVIEW — OSTF 


1. 


2. 


0 
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PURPOSE: 


SUMMARY: 


2. 


1 


PERSON CONTACTED: 


To evaluate existing plans for the WS 107A-2 Mobile Test 
Rack with respect to established principles and practices 
of human engineering in order to maximize the effective- 
ness of the weapon system through minimization of human 
errors in operation. 


Modifications - The OSTF Mobile Test Rack has been 


modified for inclusion in OB — TB designs based upon an 


analysis by the Human Factors Group in cooperation with 
the Electro-Mechanical Lab., Stamford. This redesign 
is the result of scope change calling for a stationary de- 
sign consolidation of the Test Equipment, Logic Equip- 
ment and Fault Readout Equipment per TD #59-4016. 


2.1.1 The entire unit has been made stationary by 
relocating the components into equipment racks 
in the Electrical Room of the Equipment Terminal 
Silo. 


2.1.2 The Operating Panel has been located as shown in 
Figure I, 


2.1.3 The Operating Panel has been re-designed and will 
be completely described in ER-TPS-222, Mobile 
Test Rack Human Factors Review OB-TB. 


2.1.4 Connection into circuits has been accomplished by 
plugging in four, 100 pin connectors found hinged 


to the Connector Panel. See Figure II. 


2.1.5 The lamp test has been revised to include the 
lamps in the Connector Panel. 
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Evaluation (OSTF) 


The required weight and dimensions of the 
Mobile Test Rack, considered from the 
handling standpoint, are very likely to re- 
strict the movement of this unit from one 
Equipment Terminal Silo to another. There 
are ramps, tunnel grades and turns which 
must be negotiated in all areas. 


Description of color codes should be 
lettered on panel front over each display 

to reduce chance of error. The colors 
indicated by the various displays are cor- 
rectly used according to specification but 
they have different connotations on different 
displays (i.e.,GREEN means ''GO" in the 
Launcher Status display and (TEST) 
"COMPLETED" in the Test Status display). 


The exercising of actual hardware should 
be restricted by the use of a key switch 
and a separate panel display should be used 
to indicate whether the test is simulated-or 
with the actual launcher in motion. 


The Launcher Shutdown pushbutton display 

should read ''SHUTDOWN'' to better describe 
REVERSE 

the action which takes place when this dis- 

play indicates WHITE. 


The "Extended Umbilicals'' test should be 
included as part of each regular test se- 
quence in which the umbilicals would nor- 
mally be retracted (involving Launcher 
movement). 
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2.2.6 The displays in the Connector Panel have 
a NO LIGHT condition which indicates 
that plugging in is not allowed. This con- 
dition may be confused with a dead lamp 
situation and there is no lamp test for 
these displays. Displays should be re- 
designed to read RED for no plugging and 
GREEN for plugging allowed and these 
lamps should be included in the lamp test. 


2.2.7 Connector Panel displays should indicate 
the correct sequence for unplugging by 
the use of RED and GREEN lights. 


The following AMF drawings were used in the 
preparation of this report: 


59-204-1171 Panel Assembly — 
Operating Test 


59-204-1150 Rack Assembly — 
Test Mobile 


The following AMF specification was used as a 
partial basis for the analysis section of this 
report: 


Operation Test Controller and Test 
Responder — Sub-System Test Specifi- 
cation and TEA Operating Procedure. 


Information regarding the operation of this equip- 
ment was gathered by the writer in conjunction with 
L. J. Seiden of the Stamford Laboratory. 


BASIC ASSUMPTIONS — HUMAN FACTORS EVALUATIONS 


All human factors requirements described with- 
in Detail Model Specifications, Technical 
Directives, and documents referenced therein 
are AMF contractual obligations. 


Aw3a 


)..2 The Human Factors Group is obligated to point 


out exact violations of the above and to make 
further recommendations which would improve 
man-machine compatibility. These recom- 
mendations may lead to changes which extend 
beyond AMF contractual obligations and should 
be included only where time and cost factors 


will permit, 
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Appendix B 


Operating Test Panel- 
Human Factors Review OB-TB 


FORM ED 72-A AMERICAN MACHINE & FOUNDRY COMPANY 
ENGINEERING DIVISION 
7 FIELD TRIP REPORT Sept. 24, 1959 _ _ER - TPS - #22 
= MEETING REPORT sac es ere 
(xl ENGINEERING REPORT PROJECT OR JOB NO. PAGE OF 
4 PERIOO COVERED WRITTEN BY 


NO is eh ee es SOUSTOMER: 


[sue OPERATING TEST PANEL ~ ADDRESS: 


7 HUMAN FACTORS REVIEW OB-TB PERSON CONTACTED: 


cf 1,0 PURPOSE: 1,1 To evaluate existing plans for the WS 107A-2 (OB-TB) 

Jn Operating Test Panel with respect to established principles 
and practices of Human Engineering in order to maximize 
the effectiveness of the weapon system through minimi- 

“= zation of human errors in operation. 


| 1.2 To record progress in the cooperative re-design of equip- 
4 ment based upon human factors inputs resulting from pre- 
vious evaluation of prototype plans. 


{ 2.0 SUMMARY: Following a change of scope (TD #59-4016 stationary con- 
: solidation of Test, Logic, and Fault Readout Equipment) 
| the Electro-Mechanical Lab, Stamford, redesigned the 
ie OSTF Mobile Test Rack with assistance from the Systems 
er Human Factors Group using criteria established after the 
Human Facters Review of OSTF plans. 

; 2.1 The components have been located in the equipment racks 
| in the Electrical Room of the Equipment Terminal Silo. 


2.2 The DIRECTORY for Launcher Status check-out has been 
| added to the OPERATING PANEL. 


2.3 A TEST MODE OPERATING display has been added to 
| indicate whether the equipment is in aSIMULATOR or 
LAUNCHER Test mode. The display indicates TEST MODE 
according to the number of plugs connected on the Connector 
| Panel. The LAUNCHER Test mode is related to the position 
of the Key switch below. An arrow has been used as a visual 
: connection between the LAUNCHER mode designation and the 
| Key Switch. A line connects the correct Key position with #2 
° on the Test Selector (LAUNCHER TEST) (ACTUAL). 


| : Bela 


» a eo: 


[oes 
Fd 


monet 


feed 


3.0 REFERENCES: 


2.4 


2.5 


3.1 


3.2 


The Key Switch increases the safety factors involved 
in an ACTUAL LAUNCHER HARDWARE test. 


Labeling has been etched into the panel front along 
with color dots which describe the meaning of each 
transilluminated light color. 


The designation LAUCHER has been changed to 
SHUTDOWN 
"SHUTDOWN' on the pushbutton display which functions 
REVERSE 
as a reversing control for any test in progress, and 
indicates WHITE while a test is in the shutdown se- 
quence. 


The Lamp Test has been extended to include the displays 
on the Connector Panel. 


The following AMF Drawings were used in the prep- 
aration of this report: 


59-2-0-1735 OPERATING TEST PANEL — 
LAYOUT 


59-206-1475 CHASSIS, ELECTRICAL EQUIP- 
MENT — CONNECTOR ASSEMBLY 


59-206-1601 FRAME ASSEMBLY — STRUCTURE 


Information regarding the operation of this equip ~ 
rent was gathered by the writer in conjunction with 
a. V. Seiden of the Stamford Laboratory. 


4.0 MAN-MACHINE ANALYSIS — Future Use. 


The Man-Machine Analysis section of this report was 
written primarily as a guide in the human engineering 
evaluation of the equipment — however, since it reflects 
the latest accurate information on the subject, general 
use of the contents should be made in all tasks where a 
working analysis of the Operating Test Equipment is 
required. 
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SUBJ,: Human Factors Analysis of the Titan ADDRESS: 


Launcher System - Final Report PERSON CONTACTED: 


1.0 PURPOSE: 
To insure that the TITAN LAUNCHER human operated controle and 
the logic system cannot allow damage to equipment to be caused by 


any combination of human failure, simple or complex. 


2.0 ACTION ITEMS: 

2.1 Present EMERCENCY STOP Pushbutton circuitry on Remote Control 
Console allows release of STOP control by inadvertent use of Selector 
Switch (see: 12,22.1 & 13.0). 

2.2 Present proximity of RESET Pushbutton to EMERGENCY STOP Push-~ 
button could allow a loss of STOP action when needed (see: 12,22.2 

& 13.0). 

2.3 Additional Key Station is needed to protect maintenance crews 
and equipment from accidental actuation of mechanisms from Remote 


Control Console (see: 12.22.3 & 13.0). 


3.0 


4.0 


BASIC CRITERIA 

The human errors under consideration in this analysis 
have been those which could occur at any time while a man is 
performing as a systems component using the displays and control 
devices normally exposed to him. Any selector switch, pushbutton, 
key switch, pin connector plug or circuit breaker used in the 
operation or testing of the equipment is in this category and 
shall be considered as a potential cause of malfunction or dis- 
aster at any time while human beings are available to make mis- 
takes. These human errors and various combinations thereof 
provide the basis for this analysis. Each error condition has 
been traced through the system either to a point where an inter- 
lock prevents actuation or through the actuation with a study of 


its implications. 


SCOPE 
We have considered here in this analysis those human 
error-control combinations which have even the remotest possibility 
of causing damage to equipment through collision of parts and 
overload conditions (electrical or mechanical). Every man-operated 
control, interlock and device which is normally available to be 
used, misused, misinterpreted or neglected has been listed in the 
ELIMINATION STUDY. Each control element has been checked off as 
eliminated for reasons stated, or continued for further analysis. 
Although maintenance procedures, the use of jumpers in junction 
boxes, chassis plug removal and replacement and other specialized 
situations have not been specifically considered in this effort, 


nevertheless the following items have been uncovered and are 


C=2- 


C 30 


important enough to mention here. 
WARNING 

1, Human error can contribute to situations leading 
to serious damage, unless safety precautions are carefully 
followed during maintenance operations (i.e. unless the logic 
voltage is OFF and all four test plugs are IN during removal 
and replacement of a function chassis - equipment could be 
moved out of sequence causing injury to personnel or damage to 
the Launcher and/or Missile. Replacement of a chassis should 
always be immediately followed by a complete checkout of all 
SIMULATED Tests and automatic recorrelation which is accom- 
plished by removing the test plugs). 

2. Launcher Tests (actual movement of hardware from 
Operating Test Panel) and operations from Local Control Stations 
should be initiated only while logic chassis, junction boxes 
and Motor Control power supplies are secured and checked out as 
operational. 

3. Maintenance operations of any nature should only 
be performed with all Motor Control power OFF and locked at 
the circuit breakers. 

h. Extension of Work Platforms and Umbilical Mech- 
anisms during ABORT can only be accomplished locally or re- 


motely if the LAUNCHER PLATFORM indicates DOWN. 


5.0 TABLE OF CONTENTS 


PURPOSE 

ACTION ITEMS 

BASIC CRITERIA 

SCOPE 

CONTENTS 

ELIMINATION STUDY 
INTERLOCKS 

SIMULTANEOUS CONTROL ERRORS 
CIRCUIT BREAKER ANALYSIS 
TEST PLUG ANALYSIS 

HUMAN ERRORS 

ERROR ANALYSIS 


TUNNEL ENTRANCE CONTROL STATION (T.E.C.S.) 


GROUND LEVEL PORTABLE CONTROL STATION (G.L.P.C.S.) 


CYCLING CONTROL STATION 
WORK PLATFORM LOCAL CONTROLS 


SECTION 


1.0 
2.0 
3.0 
4.0 
5.0 
6.0 
7.0 
8.0 
9.0 
10.0 
11.0 
12.0 
ol 
02 


OPERATING TEST CONTROL PANEL AND TEST PLUGS (0.T.C.P.) .5 


TUNNEL ENTRANCE CONTROL STATION AND 
OPERATING TEST CONTROL PANEL 


TUNNEL ENTRANCE CONTROL STATION AND CYCLING 
CONTROL STATION 


TUNNEL ENTRANCE CONTROL STATION AND RETRACTION 


MECHANISMS 


TUNNEL ENTRANCE CONTROL STATION AND WORK PLATFORMS 
TUNNEL ENTRANCE CONTROL STATION AND TEST PLUGS 
TUNNEL ENTRANCE CONTROL STATION AND CIRCUIT BREAKERS 


OPERATING TEST CONTROL PANEL AND CYCLING CONTROL 


STATION 


Cohn 


OPERATING TEST CONTROL PANEL AND RETRACTION 


MECHANISMS 12.13 
OPERATING TEST CONTROL PANEL AND WORK PLATFORMS lk 
OPERATING TEST CONTROL PANEL AND CIRCUIT BREAKERS 015 


GROUND LEVEL PORTABLE OONTROL STATION AND OPERATING 
TEST CONTROL PANEL 6 


GROUND LEVEL PORTABLE CONTROL STATION AND WORK 
PLAT FORMS 017 


GROUND LEVEL PORTABLE CONTROL STATION AND RETRACTION 
MECHANISMS 18 


GROUND LEVEL PORTABLE CONTROL STATION AND CYCLING 
CONTROL STATION ; 019 


GROUND LEVEL PORTABLE CONTROL STATION AND CIRCUIT 
BREAKERS , 20 


GROUND LEVEL PORTABLE CONTROL STATION AND TEST PLUGS o2l 
REMOTE CONTROL CONSOLE AND LAUNCHER SYSTEM 022 
FIELD CHANGES 13.0 
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TUNNEL ENTRANCE CONTIOL STATION 


Launcher Platform 


Launoher Platform Stop Pushbutton 


_ Launcher Platform Up Fast Pushbutton 


“Launcher Pinto Up Slow ‘Pushbutton 


Launcher Platform Down Slow Pushbutton 
. Launcher Platform Down Fast Pushbutton 
Power Pack Partial 
"Power Pack Partial ort Pushbutton | 
Power Pack Partial On Pushbutton 
Power Pack Full 


Power Pack Full off “Puahbutton 


Power Pack Full on Pushbutton 


ao 


" Sie Doora 


_stio Doors Close Pushbutton. 


sto Doors Open Pushbutton 


Orth I Looks 


Cable Slack 


Cable Seok Slacken Pushbutton 


Cable Stack Ter 1eion Pushbutton 


GROUND LEVEL PORTABLE CONTROL STATION 


Power Pack Full 


Power ‘Paok Pull off Pushbutton 


Power Pack Full On Pushbutton 


Water Spray 


Water * Spray ort 


Water Spray Hissile Protection on Pushbutton — 


Water fer Spray Flame deflector on Pushbutton 


Launcher Platform 


Launoher Platform Up Slow Pushbutton 


Launcher Platform Down Slow Pushbutton 


Leuncher Platform Down Fast: Pushbutton 


Launcher ‘Platform Stop Pushbutton 


Launcher Platform lock Pushbutton 


O.L.P.C.3. Bahnwetion Box Cover Interlocks 


6.0 ELIMINATION STUDY SHEET 1 
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CYCLING CONSUL STATION 


Annunciator Control Panel 


Acoumulator Pump itun 
System 1 


Super Charger #1 Pushbutton 


High Pressure #1 Pushbutton 


High Pressure #IIT Pushbutton 
Syaten 2 


Super Charger IT Pushbutton 
High Pressure II Pushbutton 


High Pressure ILI Pushbutton 
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Master Switch Local 


Master Switch Remote 


WORK PLATFORM CONTROLS 


Work Platform #1 Retract. Position 


Work Platform #2 Key Switch 


Work Platform #2 Extend Position 


Work Platform #2 Retract Position 


Work Platform #3 Key Switch 


Work Platform #3 Extend Position 


Work Platform #3 Retract Position 


Work Platform #4 Key Switch 


Work Platform # Extend Position 
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Work Platform #5 Key Switch 


Work Platform #5 Extend Position 
Work Platform #5 Retract Position 


RETRACTION MECHANISMS LOCAL CONTROLS 


1F1L Retract Pushbutton 


Heal 


BIL Retract Pushbutton 


6.0 ELIMINATION STUDY SHEET 2 
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© = Continued 
E = Eliminated 


2D1LV Retract Pushbutton 
2B2LV Retraction Mechanian 


. 2B2LY Extend Pushbutton 
2B2LV Retract Pushbutton 
ACILV Retraction Mechanism 

“you Extend Pushbutton 


1C1LV Retract Pushbutton 


OPERATING TEST CONTROL PANEL 


Launcher Statue Pushbutton pe GSE we 
Directory Switch 1 through 20 — 
(LAUNCHER OPERATIONAL INFORMATION ) 


Test Status Pushbutton 


Key Swdtoh 


Key Switch Off (Simulated Tests Only) 
Key Switoh On (Actual Launcher Test With Test 
ccna eeeten ent?) r 


2BULV itetraction Myohanian 
2B1LV Extend Pushbutton c 


|e 


Normal Cyole 


Engine Spray 


Platform Up 


Doors Open 


Power Pack On 


Fault Progran 


"Shutdown" Reverse Pushbutton 


TEST PLUGS 


Test Plug #1 


ee 


Test Plug #2 


: 


Test Plug #3 


Test Plug #h C 
CERCULE BREAKERS 
CROl Mode Selection BUS A hk c 
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| 
| 
| 


om As nase 


Extend Local Umbilicals 
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6.0 ELIMINATION STUDY SHEET 3 


CG © Continued 
E * Bliminated 
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- it na 
a I 
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CHO2 Auto Programmer RUS A 1 


1 ! CAO} Forward Logic BUS 8 1 
ey 


CRO, Reverse Logio BUS B 2 & (RB 3) 


CBO5 8.5.1 32 Kll-2 Interlock BUS 


teeth SNES Tet Bybee OU BS a: 
| CHO6 Spare to Moats ieee ey 
SIH BEDS ey US Tt eee 
[ CB08 Test Circuitry BUS A S . ET. 
chop Spare a 
a ons Spare ay 
C17 Unbilicals, Water Spray, Tower Forward 
ae BUS.C 5 


B18 Shelter Door, Cable Launcher Platform 
J Forward BUS C \ 
| CB19 Crib Lock Forward, Water Spray, Tower 
Unbilicals, L/P Revers¢ AUS C 3 


| - CB20 Power Pack, Shelter Door Cable, Crib Look - 


Reverse BUS C 2 


CR11 1/C Signal BUS 3VDC BUS C 1 


1 erent as annette ote corm rons enc aren wen meet 6 mee 


CB13 Spare 
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6.0 ELIMINATION STUDY SHEET 


C10 


7.0 INTERLOCKS 


71.0 
1.1 


1.2.1 
1.1.2 
1.1.3 
Lol 
1.1.5 
1.1.6 
1.1.7 
1.1.8 
1.1.9 
1.1.10 
NOTE: 


1.2 


1.2.1 
1.2.2 


1.2.3 


722.0 
21 


TUNNEL ENTRANCE CONTROL STATION 


Before L/P can be moved up SLOW or FAST, the following 
conditions must be satisfied: 


FUNCTION STATUS RELAYS OF THE FOLLOWING ITEMS MUST BE 
ENERGIZED (through contacts of limit switches mounted 
directly on the mechanisms): 

SHELTER DOOR FULLY OPEN 

CABLE TENSIONED 

1E1L RETRACTED 

3B1L RETRACTED 

2B1LLV RETRACTED 

2B2LV RETRACTED 

1C1LV RETRACTED 

WORK PLATFORMS RETRACTED 

EQUALIZER IN OPERATION 

G.L.P.C.S. connection box cover must be closed 

Any change in any one of these conditions will immediately 
STOP the LAUNCHER PLATFORM (unless there is a function 
relay failure at the same time). 


Before L/P can be moved DOWN, the following conditions 
must be satisfied: 


FUNCTION STATUS RELAYS OF THE FOLLOWING ITEMS MUST BE 
ENERGIZED (through contacts of limit switches mounted 
directly on the mechanisms): 

TOWER MECHANISM ERECT 


WATER SPRAY VALVE CLOSE DRIVE MEMORY (OPEN) & WATER SPRAY 
VALVE CLOSE INDICATED. 


G.L.P.C.S. connection box cover must be closed 


WORK PLATFORM INTERLOCKS 


Work platform cannot be extended while L/P is off the 
bottom. 


t—4 


723.0 
3.1 


7oh.0 


Te 


4.2 


Celle 


UMBILICAL SUPPORT MECHANISM INTERLOCKS 

Local retraction of these mechanisms can only be accom- 

plished after the umbilicals have been manually discon- 

nected from the missile. 

CYCLING CONTROL STATION 

The REMOTE-LOCAL switch accomplishes the following: 

REMOTE: 1. TUNNEL ENTRANCE CONTROL STATION & GROUND 
LEVEL PORTABLE CONTROL STATION are capable 
of starting and stopping the Power Pack 
Pumps. 


2. SYSTEM #1 and #2 control boxes are inoperative. 


LOCAL: The reverse of above is true. 


tatroccnd ne | 
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8.0 ‘ SIMULTANEOUS CONTROL ERRORS 


8.1.0 


8.2.0 


2.1 


2.2 


8.3.0 


3-1 


3.2 


303 


3h 
305 
3.6 


Tunnel Entrance Control Station and Ground Level Portable 
Control Station 


(Not possible because of interlocks within G.L.P.C.S. 
connection box - when box cover if open T.E.C.S. is 
disabled. ) 


Tunnel Entrance Control Station and Cycling Control Station 
REMOTE-LOCAL switch in REMOTE position. 


SYSTEM #1 and SYSTEM #2 controls are inoperative 
Power Pack control is exclusively with T.E.C.S. 


REMOTE~LOCAL switch in LOCAL position. 


T.E.C.S, is inoperative - SYSTEM #1 and #2 
boxes have control of Power Pack. 


Tunnel Entrance Control Station and Operating Test Control 
Panel 


There is very little chance that simultaneous control 
between Tunnel Entrance Control Station and Operating 
Test Control Panel can occur if equipment is already in 
motion controlled by Tunnel Entrance Control Station. 
The following conditions must be met before this can 
happen: 


The operator at 0.T.C.P. must insert Test Plug #1 against 
the RED plug status display. 


The Key Switch must be turned to the ON position. 
(TEST MODE display indicates RED - LAUNCHER) 


The Test Selector Switch must be at #2 LAUNCHER TEST 
position. 


TEST STATUS display will indicate RED NO-GO. 
LAUNCHER STATUS display will indicate RED NON~OPERATIONAL. 


Umbilicals must be retracted before the Launcher Platform 
can be started upward from any station. The SUMMED INTER- 
LOCK UMBILICAL RETRACTION ALLOWED closure must be accom- 
plished in the LAUNCH CONTROLLER before any mechanism can 
be actuated in automatic or from the Operating Test Control 
Panel in a test. An umbilical coupling must be manually 
disconnected before the related mechanism can be retracted 
by using a local control pushbutton station. 
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9.0 CIRCUIT BREAKER AND BUS ANALYSIS 


90120 


9.2.0 


2.1 


2.2 


203 


2h 


2.5 


2.6 


93.0 


3.1 


PURPOSE: TO DETERMINE THE EFFECT AN OPEN D.C. CIRCUIT 
BREAKER WOULD HAVE UPON THE LOGIC SYSTEM AND THE LAUNCHER 
MISSION. 

SUMMARY 

31 CBO3 (B1-FORWARD LOGIC) 

If 31 CBO3 is opened, it will not be possible to drive 
the shelter doors open (12K09) or to raise the platform 
(12K19). 

31 CBO) (B2, B3-REVERSE LOGIC) 

If 31 CBOk is opened, it will not be possible either to 
lower the platform (12K15) or todrive the shelter doors 
closed (12KOh). 

31 CBOS (Bh, BS5-INTERLOCK BUS) 

If 31 CBOS is opened, it will not be possible to energize 
the relays that indicate the platform is up (12K20), the 
platform is down (12K16), the doors are open (12K10), 

and the doors are closed (12K06). As a result it will 
not be possible to raise the platform. 

31 CB18 (Ch) 

If 31 CB18 is opened, it will not be possible to energize 
the solenoids to drive the shelter doors open (10A3A1L51-1) 
10A3A1L50-1) or to raise the platform (10A3A1L55-1). 

31 CB19 (C3) 


If 31 CBL9 is opened, it will not be possible to energize 
the solenoid to lower the platform. 


31 CB20 (C2) 

Power pack shuts off. 

If 31 CB20 is opened, it will not be possible to drive 
the shelter doors closed (10A3A1L50-2 & 10A3A1L51-2). 
ANALYSIS 


These Circuit Breakers are located on C.B. Chassis SA1Al 
in the Logic Racks. 


CBOl MODE SELECTION BUS = (Ak) 26VDC constant 
REMOVAL OF BUS VOLTAGE WILL NEGATE THE FOLLOWING: 


1. Catastrophic failure indication removal 
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Colle 
922.0 (Continued) 
of Forward and Reverse Logic voltage. 
2. Change over from 26VDC to 3VDC on Actuator 
Buses C2, C3, Ch, and C5. 
3. Power Supply Contactors - supply to Actuator 
Buses C2, C3, Ch, and CS. 
hk. All Status and Directory indications. 
(16K01, 16KO7 and 16K16 will be deenergized) 
(all Plug Status indications will be out) 
32 CBO2 AUTO PROGRAMMER BUS (Al) 26VDC constant 
REMOVAL OF BUS VOLTAGE WILL NEGATE THE FOLLOWING: 
1. 26VDC distribution to COMMAND BUS (B6) or 
TEST CONTROLLER BUS (B7). 
2. All Signal Receiver and Repeater functions. 
(No commands received from L.C. or repeated 
into the Launcher Controller System) 
303 CBO3 FORWARD LOGIC BUS (B12) 26VDC constant 
REMOVAL OF BUS VOLTAGE WILL NEGATE THE FOLLOWING: 
1. <All distribution to Command Memory Relays 
and Drive Memory Relays in the FORWARD zone. 
ENGINE OOMPARTME NT CLOSE 
CRIB LOCKS LOCK 
FLAME DEFLECTOR VALVE CLOSE 
MAIN WATER SUPPLY VALVE OPEN 
SILO DOORS OPEN 
CABLE SYSTEM TENSION 
LAUNCHER PLATFORM RAISE AND LOCK 


1£1L SUPPORT MECH. RETRACT 
3B1L SUPPORT MECH. RETRACT 
2BLLV RETRACT 
2B2LV RETRACT 
1C1LLV RETRACT 
TOWER MECHANISM ENERGIZED 


30h CBO REVERSE LOGIC 


26VDC constant 


REMOVAL OF BUS VOLTAGE WILL NEGATE THE FOLLOWING: 


1. 


All distribution to Command Memory Relays 
and Drive Memory Relays in the REVERSE zone. 


ENGINE COMPARTMENT VALVE OPEN 
CRIB LOCKS UNLOCK 
FLAME DEFLECTOR VALVE CLOSE 


9.2.0 (Continued) 


305 


3.6 
307 


3.8 

3.9 

3.10 
3-11 
3.12 
3.13 
3014 


CBOL 


CBOS 


CBOS 


CBO8 
CBO9 
CB1O 
CBl1 
CB12 
CB13 
CB16 


MAIN WATER SUPPLY VALVE CLOSE 
SILO DOORS CLOSE 
CABLE SYSTEM SLACKEN 
LAUNCHER PLATFORM UNLOCK AND LOWER 
ELL SUPPORT MECH. (LOCAL) EXTEND 
3BLL SUPPORT MECH. (LOCAL) EXTEND 
2B1LV SUPPORT MECH. (REMOTE) EXTEND 
2B2LV SUPPORT MECH. (REMOTE) EXTEND 
1C1LV SUPPORT MECH. (REMOTE) EXTEND 
TOWER MECHANISM ERECT 

NO LOGIC VOLTAGE (B3) 26VDC with 


32K13-2 closed 
REMOVAL OF BUS VOLTAGE WILL NEGATE THE FOLLOWING: 
1. Indication to the Test Controller. 
2. Correlation circuitry. 
INTERLOCK BUS (Bh) 26VDC constant 
REMOVAL OF BUS VOLTAGE WILL NEGATE THE FOLLOWING: 
1. All Limit Switch Closures will read open. 
2. <All Function Relays will open. 


3. Power Pack ON displays will go out while 
pumps continue to run. 


LIMIT SWITCH BYPASS used in test only 


SPARE 
FAULT CIRCUITRY BUS (A2) 26VDC constant 
REMOVAL OF BUS VOLTAGE WILL NEGATE THE FOLLOWING: 


1, All Fault Detection and Registration - no 
record of fault will appear. 


TEST CIRCUITRY (AS) 26VDC constant 
SPARE 
WORK PLATFORM (A3) 26VDC constant 
L/C SIGNAL BUS (C1) 3VDC constant 
3VDC TEST BUS (Dh) 3VDC constant 
SPARE 


SPARE 
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9.2.0 (Continued) 


3.15 


3.16 


3.17 


CB17 


CB18 


ACTUATOR BUS BUS (C5) 


Changes from 26VDC to 3VDC with Test Plug #2, - 
or # inserted. 


REMOVAL OF BUS VOLTAGE WILL NEGATE THE FOLLOWING: 


1£1L SUPPORT MECH, SOLENOID RETRACT 
3BLL SUPPORT MECH. SOLENOID RETRACT 
2B1LV SUPPORT MECH. SOLENOID RETRACT 
2B2LV SUPPORT MECH. SOLENOID RETRACT 
1C1LV SUPPORT MECH. SOLENOID RETRACT 
ENGINE COMPARTMENT SPRAY VALVE 

SOLENOID CLOSE 
ENGINE COMPARTMENT BYPASS 

SOLENOID SHUT OFF 
FLAME DEFLECTOR SPRAY VALVE 

SOLENOID CLOSE 


MAIN WATER SUPPLY VALVE SOLENOID OPEN 
TOWER TILT SUPPLY VALVE SOLENOID OPEN 


ACTUATOR BUS BUS (Ch) 


Changes from 26VDC to 3VDC with Test Plug #2, #3, 
or # inserted. 


REMOVAL OF BUS VOLTAGE WILL NEGATE THE FOLLOWING: 


LAUNCHER PLATFORM SOLENOIDS UP 
UPPER AND LOWER DOOR SOLENOIDS OPEN 


TENSION EQUALIZERS ISOLATE 
DRIVE BASE TO SILO WALL REAR 
LOCKS INSERT 
STUB RAIL LATCHES EXTEND 
CABLE DRIVE BASE TO DOOR FOUNDATION 
SYSTEM SPRING LOCKS RETRACT 
TENSION EQUALIZERS RAISE 


CB19 


COUNTERWEIGHT LIFTING CYLINDER RAISE 

COUNTERWEIGHT TO DRIVE BASE 

LOCKS RETRACT 
ACTUATOR BUS BUS (C3) 


Changes from 26VDC to 3VDC with Test Plug #2, #3, 
or #h inserted. 


REMOVAL OF BUS VOLTAGE WILL NEGATE THE FOLLOWING: 


VERTICAL CRIB LOCKS SOLENOID RAISE 
HORIZONTAL CRIB LOCKS SOLENOID EXTEND 


INCLINED LOCKS SOLENOID EXTEND 
ENGINE COMPARTMENT SPRAY VALVE 
SOLENOID OPEN 


FLAME DEFLECTOR SPRAY VALVE 
SOLENOID OPEN 
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9.2.0 (Continued) 


3.18 


MAIN WATER SUPPLY VALVE 
SOLENOID 

TOWER TILT SOLENOID 

1E1L SUPPORT MECH. SOLENOID 
3B1L SUPPORT MECH. SOLENOID 
2B1LV SUPPORT MECH. SOLENOID 
2B2LV SUPPORT MECH. SOLENOID 
1C1LV SUPPORT MECH. SOLENOID 
LAUNCHER PLATFORM SOLENOIDS 


CB20 ACTUATOR BUS BUS (C2) 


Cal7e 


CLOSE 
ERECT 

(LOCAL) EXTEND 
(LOCAL) EXTEND 
(REMOVE) EXTEND 
(REMOVE) EXTEND 
(REMOVE) EXTEND 
DOWN 


Changes from 26VDC to 3VDC with Test Plug #2, #3, 


of #l inserted. 


REMOVAL OF BUS VOLTAGE WILL NEGATE THE FOLLOWING: 


VERTICAL CRIB LOCKS SOLENOID 
HORIZONTAL CRIB LOCKS SOLENOID 
INCLINED LOCKS SOLENOIDS 
POWER PACK 


UPPER & LOWER DOOR SOLENOIDS 
COUNTERWEIGHT TO DRIVE BASE 
LOCKS 
TENSION EQUALIZERS 
CABLE 
SYSTEM DRIVE BASE TO DOOR FOUNDATION 
SPRING LOCKS 
STUB RAIL LATCHES 
DRIVE BASE TO SILO WALL REAR 
LOCKS 
COUNTERWEIGHT LIFTING CYLINDER 


LOWER 

RETRACT 
RETRACT 

FULL & PARTIAL 
CONTROL 

CLOSE 


EXTEND 
LOWER & FILL 
MEASURING VESSEL 


INSERT 
RETRACT 


RETRACT 
RAISE 
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10.0 TEST PLUG ANALYSES 


10.1 ANALYSIS OF TEST PLUG REMOVAL DURING LAUNCHER PLATFORM TEST 


T OP ING T CONTRO 

1.1 Providing there is no failure during the procedure, 
the Launcher Platform will be driven to its full up and locked 
position and returned to its fully lowered position when the Test 
Selector Switch on the Operating Test Control Panel is set at 
position 2, the key switch is ON, and Test Plug #1 only is in- 
serted. At the start of this test, a signal is sent to the 


control circuitry from Deck 1 of the Test Program Stepping Switch 


-34K10. At the completion of the first operation in the sequence, 


a signal is returned from the control circuitry to Deck 2 of 3K 
10. This signal is transmitted by the Program Status Indication 
Relay 45KO3 to the coil of the Test Signal Receiver Relay 37K3. 
Relay 37K3 energizes relay 3l4K06 which allows the coil of the 
Test Program Stepping Switeh to be energized. As a result 3)4K10 
steps to its next position and another signal is sent from Deck 1 
to initiate the next operation in the sequence. This procedure 
continues until 3)K10 has advanced through its 2 positions and 
returned to HOME. At this time the Launcher Platform will be 
restored to its fully down position. 

1.2 If an operator inadvertently removes Test Plug #1 
during any part of this test, 45K03 will be deenergized. As a 
result, it will not be possible to energize the Test Program 
Stepping Switch and 3))K10 will remain where it is. The operation 
in process at the time will be completed. (For example if 3K10 
is at position 6 when Test Plug #1 is disconnected, the Launcher 
Platform will move until a fully up and locked indication is 


transmitted to the control circuitry. 


10.1.2 (Continued) 


During the period Test Plug #1 is unplugged, 

3UK10 will remain where it is unless it has been returned to 
the HOME position by actuation of the Test Status Pushbutton. 
This pushbutton energizes the Program Bypass Memory Relay 45K11-1 
which causes Relay 3K10 to be stepped until it returns to HOME. 

1.3 The Launcher Test can be completed when Test Plug 
#1 is reconnected provided that the Test Selector Switch has 
not been moved from position 2. If 3K10 is at HOME, it will 
be necessary for the operator to push the Test Start Pushbutton. 
This will cause 34K10 to advance through its 2) positions and 
complete the sequence. If 3)K10 is at its previous position, 


it will continue from that point and complete the sequence. 
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10.2 TEST PLUG STATUS LIGHTS 

An operator is provided with visual cues which con- 
stantly guide him in the proper handling of the four test plugs. 
The equipment which provides these cues is described below. 

2.1 One transilluminated indicator has been located 
directly above each Test Plug on the Connector Chassis. 

A RED and a GREEN seatas light indication is 
provided for each of the four test plugs. One of the two lights 
associated with each plug will always be illuminated, while 
Circuit Breaker CBOl is closed and Bus Al is energized, A GREEN 
light means that the plug may be connected or disconnected while 
a RED light means that the plug should not be touched. 

2.2 The RED lights will all be illuminated: 

2.2.1 While (Partial Power Pack On) Relay 33K10 is 
energised (Power Pack Pumps running in any mode of operation). 

2.2.2 Or while 33K10 (Partial Power Pack On) is not 
energized; 5KO6 (Test Controller Connected) is energized; 5K12 
(Fault Program Repeat) is not energized; and 45KO3 (Program (Test) 
Start) is energized in any test mode originated from the Operating 
Test Control Panel. 

2.3 The GREEN light will be illuminated over plug #1 
while relay 33K10 is deenergized. When plug #1 is connected, 
the (Test Controller Connected) Relay 45K06 will be energized 
causing the GREEN light to be illuminated over plug #2. When 
pins 93 and 9) of plug #2 make contact and the 32K10 (26VDC Con- 
tactor On) Relay is not energized the GREEN lights over plugs #3 
and #4 will be illuminated. At the same time, the display over 


plug #1 will change from GREEN to RED. 
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| 10.3 TEST PLUG PIN ANALYSIS (REFERENCE HFT-~1035) available from 
Human Factors Group, Technical Staff, GED, 11 Bruce Place, Greenwich, 
| Connecticut. 
| 3,1 If the Power Pack is ON and Test Plug #1 is inserted. 
| (33K10 Partial Power Pack ON contacts open) 
1. IC signal bus will not switch to 3VIKC. 
2. B6 command bus will remain alive. 
| 3. B7 Test Controller bus will be dead. 
3.2 If the Power Pack is ON and Test Plug #2, #3, or #4 
| : are connected, 
ia 1, Actuating supply buses will remain at 26VDC. 
| 2, 5KO1 (Test Controller connected) will be energized. 

3. (#2) 280) Key Switch (Launcher Test) is bypassed. 

h. A closure of any Drive Memory Relay will burn out the 
associated 3VDC Actuator Sensing Relay and short out the associated 
q° solenoid, If the solenoid burns open, actuation may continue if the 
L circuit breakers hold on the actuation buses. It is very likely 
that during Launcher Platform movement the effect of such an error 

would result in a Power Pack shutdown which will cause the Launcher 


| Platform brake to stop the platform motion safely. 
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11.0 HUMAN ERRORS 
| Various types and causes of human errors have been 
categorized for use on ERROR ANALYSIS SHEETS. Letter designations 
| are referencéd in the ERROR columns of the ANALYSIS SHEETS within 


| section 12.0. 


11.1 ERRORS 
| 1.1 INVOLVING SINGLE LOCATION: 
* A. Accidental actuation. 
| B. Out of sequence operation (disregarding 


_ illuminated display clues or direct visual clues). 
1.2 INVOLVING VARIOUS LOCATIONS: 

| C. Conflicting actuations. 
ss D. Loss of control. 
I 11.2 CAUSES 
2.1 INCORRECT PROCEDURES 

E. Failure to use lamp test to determine capa- 
| bility of illuminated displays. 

F. Failure to clear with proper authority before 
i changing equipment condition. 
| G. Failure to follow safety precautions. 
H. Inadquate knowledge of the system. 
| 2.2 INADVERTENT ACTIONS 

I. Leaning against controls (recessed buttons). 
| J. Actuation while cleaning controls. 
| K. Mistakes (negligence). 


L. Panic. 
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